Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Rar archive
Size
810.27 KB · 810,274 B
First seen
2026-10-14 15:30 · 11 days ago
Last seen
2026-10-14 15:30 · 11 days ago
Last analysis
2026-10-14 15:33 · 11 days ago
Hashes
MD5 94aa2ae25ca01cf36f833516fd13df4b Sha1 6b5923bb15e3119f06f35281d59812d34d61711f Sha256 86dfa03616288994385a6aaf1106e1320d92096122b376f2ef6229c73fc1ee0d Sha384 cb3dccec00f9b6f3104838c64a9db569cb391ad82c6eda34b74f38eb9b3758dca68122996531dc6fd2d7740f3ed7e0fd Sha512 875cade2190edfd00e44eacd87ccd2a87e95245eb84d83b23ed501a6befa88671b2ef2e60a79bd6b6252c9c222d2ed83bc8da9169ce0178a156d3d5aeaa02305 SSDeep 12288:akQsKcFYuyTOI/fj22F3KsjjCBGqaAla/xllLt40bzKNObReXbybIrRNkk8Fytxe:tiRf62zjjkafJvLt7zRbg2wNkXFyEh TLSH C005231DA590B37FC463230AB5943635E18EDFCC95175E8BAB92BE05046AECEDDC3608
3 malicious · 63 files
RAR94aa2ae25ca01cf36f833516fd13df4b.NET Reflective Loader
EXEPurchase order.exe.NET Reflective Loader
Structure
BIN.Net Reflective Loader
EXEMaselatki.562567.tsx [AES Decrypted]
Structure
BINOverlay_fef55cbd.bin
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
BINAttachedParser.TokenParser
BINOperationalParser.HiddenParser
BINDetachedParser.ParserFactory
BINParserEditor.ParserElement
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
TSXMaselatki.562567.tsx
BINoMj24mm.Resources.resources
BINab1a64766075e4.Resources.resources
BINb92bf1a60
DATA[NBF]root.Data
BINb92bf1a61
DATA[NBF]root.Data
BINb92bf1a610
DATA[NBF]root.Data
BINb92bf1a611
DATA[NBF]root.Data
BINb92bf1a612
DATA[NBF]root.Data
BINb92bf1a613
DATA[NBF]root.Data
BINb92bf1a614
DATA[NBF]root.Data
BINb92bf1a615
DATA[NBF]root.Data
BINb92bf1a616
DATA[NBF]root.Data
BINb92bf1a617
DATA[NBF]root.Data
BINb92bf1a618
DATA[NBF]root.Data
BINb92bf1a619
DATA[NBF]root.Data
BINb92bf1a62
DATA[NBF]root.Data
BINb92bf1a620
DATA[NBF]root.Data
BINb92bf1a621
DATA[NBF]root.Data
BINb92bf1a622
DATA[NBF]root.Data
BINb92bf1a623
DATA[NBF]root.Data
BINb92bf1a624
DATA[NBF]root.Data
BINb92bf1a63
DATA[NBF]root.Data
BINb92bf1a64
DATA[NBF]root.Data
BINb92bf1a65
DATA[NBF]root.Data
BINb92bf1a66
DATA[NBF]root.Data
BINb92bf1a67
DATA[NBF]root.Data
BINb92bf1a68
DATA[NBF]root.Data
BINb92bf1a69
DATA[NBF]root.Data
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
4 / 4
Path arc:rar>pe:exe>pe:dll~T1059.007>pe:rsrc>bin
Shape arc:rar>pe:exe>pe:dll>pe:rsrc>bin
malicious 5 nodes
Path arc:rar>pe:exe>pe:dll~T1059.007>bin
Shape arc:rar>pe:exe>pe:dll>bin
malicious 4 nodes
3 malicious · 63 files
RAR94aa2ae25ca01cf36f833516fd13df4b.NET Reflective Loader
EXEPurchase order.exe.NET Reflective Loader
Structure
BIN.Net Reflective Loader
EXEMaselatki.562567.tsx [AES Decrypted]
Structure
BINOverlay_fef55cbd.bin
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙